Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
File:                     5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json)
Hash identifier:          97sk5xBhbBKJJIrQITXvbZzCguSMhdB8o3KuTyocD3E=
Subject key identifier:   34:65:B0:19:01:AE:7C:9A:DA:26:64:C8:97:34:93:E3:52:93:F4:9A
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Certificate issuer:       /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
Manifest number:          D9
Signing time:             Sun 19 Apr 2026 06:17:41 +0000
Manifest this update:     Sun 19 Apr 2026 06:17:41 +0000
Manifest next update:     Sun 26 Apr 2026 06:17:41 +0000
Files and hashes:         1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: CBMQInHg1mWwMpTAVa5mRtjtoo3Chn+QiLJu3lHu3QA=)
                          2: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: C3aagPpa6AuSNI4mAxmbbsp6/a45ylNp6b8evhWo/ho=)
                          3: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: rUwmt+bo32fXyc76egq+OZINFYA/ahBwXXwNyoCKn6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
                          rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
        Validity
            Not Before: Apr 19 06:17:41 2026 GMT
            Not After : Apr 26 06:17:41 2026 GMT
        Subject: CN=69e47385-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:f6:6d:37:26:8d:3c:78:98:31:ef:b0:68:
                    07:ad:08:06:89:24:0e:89:08:4f:26:db:8d:80:d8:
                    8a:21:6e:76:81:22:dd:e6:d7:1b:22:71:33:49:f7:
                    78:dd:c7:56:90:08:7d:6b:c8:e7:e4:19:58:67:a6:
                    46:c9:0b:4c:1c:5f:33:dd:a2:c9:ab:5c:8b:c5:f1:
                    c2:12:8d:81:53:0c:c4:08:d0:45:14:30:0a:a8:66:
                    3d:2d:85:e4:c2:96:4e:1f:fc:d7:25:be:4d:d1:81:
                    7d:54:b6:7c:99:d7:0c:b9:7d:bc:e5:86:f6:4d:79:
                    9e:f6:7c:d2:48:a7:59:e9:27:5a:46:04:48:00:67:
                    43:bb:25:f9:7c:94:a4:1f:ae:10:46:ff:33:fd:75:
                    13:2e:15:b0:0b:d9:5a:bd:68:16:23:2f:41:cc:9c:
                    b0:62:2b:66:f8:90:d2:5f:be:68:6d:1e:53:8f:37:
                    ce:60:76:ed:b2:3e:58:5d:68:7a:cc:99:3e:7a:38:
                    e4:ae:a7:73:d7:fa:d6:c2:4d:0f:6e:64:11:c0:63:
                    9b:2b:ea:66:52:83:70:cb:35:43:3d:36:81:28:9e:
                    c6:00:bd:fd:c8:64:5e:75:7c:c0:b5:30:9f:33:47:
                    05:45:58:b6:5f:d6:45:c0:c6:4e:7a:9f:af:ff:e5:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:65:B0:19:01:AE:7C:9A:DA:26:64:C8:97:34:93:E3:52:93:F4:9A
            X509v3 Authority Key Identifier:
                keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:57:b1:79:27:e4:31:64:c0:6c:7f:e4:be:52:8a:ed:78:0a:
         e1:0b:fc:0d:f9:06:c1:f7:74:4f:30:6d:96:d2:da:36:29:30:
         d0:49:4f:14:72:38:dd:16:5b:4f:27:8d:25:bb:50:07:9d:e2:
         b8:13:90:26:56:27:2b:77:d0:5b:45:97:3f:ae:cf:12:3e:7f:
         5f:8f:35:21:0c:78:64:09:d0:0d:f4:4c:44:eb:89:59:62:de:
         c6:13:ec:9a:78:1f:20:b9:b4:89:b6:bc:29:03:8d:04:1b:ab:
         ed:51:6e:a1:10:4f:cf:65:e8:d6:b3:cc:69:74:b7:41:e5:b2:
         b9:26:aa:39:7f:b2:65:b0:63:48:fe:69:7f:27:e6:00:7a:a1:
         84:21:af:2a:1b:4f:05:22:be:5b:1f:24:5e:76:a4:d1:c9:e9:
         a9:f3:f3:b0:86:c6:64:25:c2:f5:a1:8b:24:6a:ec:f9:aa:9d:
         a7:79:86:1f:ea:5a:6a:d1:56:35:13:75:5d:0c:ed:42:f3:80:
         dd:7b:2d:8a:42:b8:6f:f5:29:26:34:a2:93:32:b9:76:2a:d4:
         99:20:f4:a9:69:ee:15:a3:69:e9:1b:28:9a:79:6d:83:b7:4a:
         2d:97:9f:a7:db:7b:8b:b8:7b:13:5f:77:da:10:b1:f4:fd:c1:
         03:07:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:20 2026 by rpki-client